Add missing parts for role assumption policy

Author: Falk Schykowski

modules/karpenter/main.tf

@@ -289,6 +289,15 @@ data "aws_iam_policy_document" "node_assume_role" {
       type        = "Service"
       identifiers = ["ec2.${local.dns_suffix}"]
     }
+
+    dynamic "condition" {
+      for_each = var.iam_role_conditions
+      content {
+        test     = condition.value.test
+        variable = condition.value.variable
+        values   = condition.value.values
+      }
+    }
   }
 }
 

modules/karpenter/variables.tf

@@ -65,10 +65,11 @@ variable "iam_role_permissions_boundary_arn" {
 variable "iam_role_conditions" {
   description = "Additional conditions of the IAM role assume policy"
   type = list(object({
-    test = string
-    variable = string
-    values = list(string)
+    test      = string
+    variable  = string
+    values    = list(string)
   }))
+  default = []
 }
 
 variable "iam_role_tags" {